grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: OSV:GHSA-RRJ3-QMH8-72PF...

GHSA-RRJ3-QMH8-72PF grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file

Versions of grunt-gh-pages prior to 0.10.0 are affected by a vulnerability which may cause unencrypted GitHub credentials to be written to a log file in certain circumstances. In the grunt-gh-pages deployment scenario where authentication is performed by injecting a GitHub token directly into the...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: GHSA-RRJ3-QMH8-72PF...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: MEND:CVE-2016-10526...

PT-2018-4706

Name of the Vulnerable Software and Affected Versions grunt-gh-pages versions prior to 0.10.0 Description The issue concerns the exposure of GitHub credentials in certain deployment scenarios. In setups where a GitHub token is directly injected into the URL for authentication, the token may be...